Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227892c8-41de-471e-a0b3-e9bf1af6374e.roa
File: 227892c8-41de-471e-a0b3-e9bf1af6374e.roa (raw, json)
Hash identifier: a8ow+Mgfn+smX0mwfR52S6dtHVDBWl+Gp5Sfd+DFufY=
Subject key identifier: 9A:9B:5D:DE:FB:46:7F:F0:C5:8B:2E:13:E0:E9:A1:E4:25:97:0D:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B2422B2D6A6310F15B6444D6ADED2E6F8244A36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227892c8-41de-471e-a0b3-e9bf1af6374e.roa
Signing time: Sun 19 Oct 2025 00:10:40 +0000
ROA not before: Sun 19 Oct 2025 00:10:40 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:24:22:b2:d6:a6:31:0f:15:b6:44:4d:6a:de:d2:e6:f8:24:4a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:10:40 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=ccfd2d56ab358125ccae132b3521447641a5be8247f0325f748cec00ae258d7f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:b6:d9:d7:17:ff:fe:f0:42:ee:2d:af:2e:
db:1f:6e:22:6b:2e:05:59:65:ce:90:72:df:88:c6:
c6:d5:e1:a0:b0:cb:92:e2:3a:56:75:e7:d5:70:c6:
0c:13:03:47:a6:bf:78:b4:8b:bb:48:4a:a4:80:31:
ef:03:07:6a:ce:4b:6c:79:56:1b:23:b2:f5:d5:22:
d3:ee:25:06:f7:dc:fe:6d:38:3a:c2:5c:26:75:2d:
ed:1f:9d:2e:95:b2:28:9f:2f:01:f8:f9:ba:af:d0:
bc:fd:05:da:c8:13:20:1a:ca:05:3b:c9:67:79:e1:
b1:f7:07:9b:4e:9b:0c:93:f6:2b:75:8d:41:f3:61:
48:91:91:86:f7:53:5e:d8:4e:53:e7:27:f2:15:4c:
d1:62:b1:c6:2e:12:55:f8:c1:83:96:dc:b8:24:b5:
44:a5:1b:70:90:c1:01:7d:35:89:32:96:9c:0c:94:
dc:c4:e2:43:1b:1c:69:35:0d:9f:ce:4a:87:07:1a:
4e:23:be:32:4d:66:ad:d6:ce:cc:7d:23:d7:09:88:
5e:96:b1:e6:b0:83:7d:6a:97:26:7e:1e:45:74:ae:
ce:f0:0d:34:7a:40:50:9b:d2:18:35:b2:ef:56:1a:
6b:65:7d:83:a3:2a:d4:57:8b:d4:56:3a:81:2f:4d:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:5D:DE:FB:46:7F:F0:C5:8B:2E:13:E0:E9:A1:E4:25:97:0D:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/227892c8-41de-471e-a0b3-e9bf1af6374e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:f9:05:45:4b:8b:62:49:36:7b:d9:6d:c0:e5:02:24:ac:15:
8c:6d:a2:21:f1:d8:db:ad:98:b0:18:3d:5f:e8:c1:8d:04:19:
26:df:7d:3c:e4:30:7f:b0:a2:64:c0:9e:0f:da:b9:54:71:e9:
e2:a1:7b:2b:87:97:3f:97:c7:c2:e9:5f:0a:36:6d:b6:db:be:
9c:e3:ad:3b:95:f9:1d:cc:d0:d3:68:87:84:70:8b:cf:da:69:
69:1f:73:74:5b:ab:62:05:f2:64:db:78:89:b0:36:27:68:9a:
9f:14:44:27:c0:59:7f:46:69:e1:f1:2f:2e:3f:cf:78:82:e5:
ed:4b:d8:f9:98:f4:db:88:89:87:3b:b2:25:f1:21:05:09:d9:
89:4a:b4:0e:fd:7f:3c:19:fa:4d:63:b2:8c:ec:08:78:9e:c6:
85:d4:f7:2f:fd:80:00:12:77:25:df:02:cf:f7:86:a3:c9:26:
be:2b:ec:45:8a:58:83:a0:04:a1:db:2f:b8:ab:68:8c:e5:ec:
0b:88:72:d6:84:3f:1e:a8:93:9f:4a:2a:86:d2:a5:6b:fd:24:
2d:23:71:11:f2:f0:d1:bb:f4:7f:d1:e5:15:45:9f:d1:d0:33:
6b:3e:20:e1:7f:aa:cc:d8:98:d7:39:58:f6:10:24:19:40:b4:
89:50:9a:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOyQistamMQ8VtkRNat7S5vgkSjYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAxMDQwWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjY2ZkMmQ1NmFiMzU4MTI1Y2NhZTEzMmIzNTIxNDQ3NjQx
YTViZTgyNDdmMDMyNWY3NDhjZWMwMGFlMjU4ZDdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGqrbZ1xf//vBC7i2vLtsfbiJrLgVZZc6Qct+IxsbV4aCw
y5LiOlZ159VwxgwTA0emv3i0i7tISqSAMe8DB2rOS2x5VhsjsvXVItPuJQb33P5t
ODrCXCZ1Le0fnS6VsiifLwH4+bqv0Lz9BdrIEyAaygU7yWd54bH3B5tOmwyT9it1
jUHzYUiRkYb3U17YTlPnJ/IVTNFiscYuElX4wYOW3LgktUSlG3CQwQF9NYkylpwM
lNzE4kMbHGk1DZ/OSocHGk4jvjJNZq3Wzsx9I9cJiF6Wseawg31qlyZ+HkV0rs7w
DTR6QFCb0hg1su9WGmtlfYOjKtRXi9RWOoEvTd0dAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmptd3vtGf/DFiy4T4Omh5CWXDY8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIyNzg5MmM4LTQxZGUtNDcxZS1hMGIzLWU5YmYxYWY2Mzc0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsiy0wDQYJKoZIhvcNAQELBQADggEBAJz5BUVLi2JJNnvZbcDlAiSsFYxt
oiHx2NutmLAYPV/owY0EGSbffTzkMH+womTAng/auVRx6eKheyuHlz+Xx8LpXwo2
bbbbvpzjrTuV+R3M0NNoh4Rwi8/aaWkfc3Rbq2IF8mTbeImwNidomp8URCfAWX9G
aeHxLy4/z3iC5e1L2PmY9NuIiYc7siXxIQUJ2YlKtA79fzwZ+k1jsozsCHiexoXU
9y/9gAASdyXfAs/3hqPJJr4r7EWKWIOgBKHbL7iraIzl7AuIctaEPx6ok59KKobS
pWv9JC0jcRHy8NG79H/R5RVFn9HQM2s+IOF/qszYmNc5WPYQJBlAtIlQmpQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:51 2025 by rpki-client